Non-transitory computer-readable storage medium, terminal device, and information processing system

ABSTRACT

A non-transitory computer-readable storage medium storing a program configured to cause a terminal device to execute a game in communication with a server device, the program includes: a first storing step of receiving from the server device at least one token generated and stored in the server device to store the token in a terminal storage unit; a transmitting step of transmitting to the server device information-to-be-transmitted including an updating instruction of game data of a user and encrypted information obtained by encrypting information-to-be-encrypted at least including the token; and a deleting step of deleting the token stored in the terminal storage unit, wherein the updating instruction includes a first instruction to update the game data stored in the server device when the token extracted by decrypting the encrypted information and the token stored in the server device are matched.

DESCRIPTION

This application is a continuation of U.S. application Ser. No.16/200,223, filed Nov. 26, 2018, which claims priority to JapaneseApplication No. 2017-240908 filed on Dec. 15, 2017, the entiredisclosures of which are incorporated herein by reference in theirentirety.

TITLE OF INVENTION

Non-transitory computer-readable storage medium, terminal device, andinformation processing system

TECHNICAL FIELD

The present invention relates to a non-transitory computer-readablestorage medium, a terminal device, and an information processing system.

BACKGROUND ART

Conventionally, known is an information processing system includinginformation processing devices such as a server device and a terminaldevice to provide a game to a user(s). For example, Patent Document 1discloses a game system that includes a server device and a plurality ofterminal devices to provide a game in which users play battles againsteach other.

CITATION LIST Patent Literature

[Patent Literature 1] Japanese Patent No. 5841280

SUMMARY OF INVENTION Technical Problem

In an information processing system including a server device and aterminal device, known is a configuration in which game data of a userare managed by the server device. For example, when a user plays a gameusing the terminal device, the server device and the terminal devicecommunicate with each other so that the game data of such user (forexample, a high score of the user in the game, etc.) stored in theserver device are updated. However, in the conventional technology,there is the probability that, for example, falsified information istransmitted from the terminal device to the server device due tofraudulent action of a user resulting in that the game data of such userstored in the server device are falsified. Therefore, it is desired toreduce the probability that the game data are falsified due tofraudulent action of a user.

An object of the present invention in view of such circumstances is toprovide a non-transitory computer-readable storage medium, a terminaldevice and an information processing system, in which the probabilitythat game data are falsified due to fraudulent action of a user who usesa terminal device is reduced.

Solution to Problem

In accordance with a first aspect of the present invention, in anon-transitory computer-readable storage medium storing a programconfigured to cause a terminal device to execute a game in communicationwith a server device, the program includes: a first storing step ofreceiving from the server device at least one token generated and storedin the server device to store the token in a terminal storage unit; atransmitting step of transmitting to the server deviceinformation-to-be-transmitted including an updating instruction of gamedata of a user and encrypted information obtained by encryptinginformation-to-be-encrypted at least including the token; and a deletingstep of deleting the token stored in the terminal storage unit, whereinthe updating instruction includes a first instruction to update the gamedata stored in the server device when the token extracted by decryptingthe encrypted information and the token stored in the server device arematched.

In accordance with a second aspect of the present invention, a terminaldevice executing a game in communication with a server device includes:a terminal storage unit; and a terminal control unit, wherein theterminal control unit executes: receiving from the server device a tokengenerated and stored in the server device to store the token in theterminal storage unit; transmitting to the server deviceinformation-to-be-transmitted including an updating instruction of gamedata of a user and encrypted information obtained by encryptinginformation-to-be-encrypted at least including the token; and deletingthe token stored in the terminal storage unit, wherein the updatinginstruction includes an instruction to update the game data stored inthe server device when the token extracted by decrypting the encryptedinformation and the token stored in the server device are matched.

In accordance with a third aspect of the present invention, aninformation processing system executing a game includes: a serverdevice; and a terminal device, wherein the server device executes:storing game data of a user in a server storage unit; generating a tokento store the token in the server storage unit; and transmitting thetoken to the terminal device, wherein the terminal device executes:receiving the token from the server device to store the token in aterminal storage unit; transmitting to the server deviceinformation-to-be-transmitted including an updating instruction of thegame data of the user and encrypted information obtained by encryptinginformation-to-be-encrypted at least including the token; and deletingthe token stored in the terminal storage unit, wherein the server deviceexecutes: receiving the information-to-be-transmitted from the terminaldevice to decrypt the encrypted information included in theinformation-to-be-transmitted and extract the token; updating the gamedata stored in the server storage unit based on the updating instructionwhen the extracted token and the token stored in the server storageunit; and deleting the token stored in the server storage unit.

Advantageous Effects of Invention

According to a non-transitory computer-readable storage medium, aterminal device and an information processing system of an embodiment ofthe present invention, the probability that game data are falsified dueto fraudulent action of a user who uses a terminal device is reduced.

BRIEF DESCRIPTION OF DRAWINGS

FIG. 1 is a block diagram of an information processing system accordingto an embodiment of the present invention.

FIG. 2 is a diagram showing an example of information stored in a serverdevice.

FIG. 3 is a diagram showing an example of information stored in aterminal device.

FIG. 4 is a diagram showing an example of update information generatedby the terminal device.

FIG. 5 is a diagram showing an example of information-to-be-encryptedgenerated by the terminal device.

FIG. 6 is a diagram showing an example of a first screen displayed bythe terminal device.

FIG. 7 is a diagram showing an example of a second screen displayed bythe terminal device.

FIG. 8 is a sequence diagram showing a first behavior of the informationprocessing system.

FIG. 9 is a flowchart showing a second behavior of the terminal device.

FIG. 10 is a sequence diagram showing a third behavior of theinformation processing system.

FIG. 11 is a flowchart showing a fourth behavior of the terminal device.

DESCRIPTION OF EMBODIMENTS

Hereinafter, embodiments of the present invention are described.

(Configuration of Game System)

With reference to FIG. 1, an outline of an information processing system1 according to an embodiment of the present invention is described. Theinformation processing system 1 includes a server device 10 and one ormore terminal device(s) 20. Although FIG. 1 shows three terminal devices20 for convenience, the number of terminal devices 20 may be arbitrarilyset.

The server device 10 is, for example, an information processing devicesuch as a server to be managed by a game administrator. The terminaldevice 20 is, for example, an information processing device to be usedby a user, such as a mobile phone, a smartphone, a tablet terminal, a PC(Personal Computer), a game device or the like. The terminal device 20can execute an application program of a game according to theembodiment. Hereinafter, an application program is also simply referredto as an application. The application of the game may be retrieved, forexample, from a predetermined application distribution server via anetwork 30 such as the Internet to the terminal device 20, alternativelyit may be in advance stored in a storage device provided in the terminaldevice 20 or a storage medium such as a memory card readable by theterminal device 20. The server device 10 and the terminal device 20 arecommunicably connected via the network 30.

The server device 10 and the terminal device 20 execute multipleprocessing related to the game in cooperation. For example, the serverdevice 10 and the terminal device 20 may execute a series of processingthrough division. Further, for example, the server device 10 and theterminal device 20 may execute the same processing, respectively. Withrespect to such same processing, when processing results are matchedbetween the server device 10 and the terminal device 20, the serverdevice 10 and the terminal device 20 may complete such processing. Onthe other hand, when processing results are not matched between theserver device 10 and the terminal device 20, the server device 10 andthe terminal device 20 may complete such processing with the processingresult of the server device 10 as true, alternatively processing may beturned back to a phase before executing such same processing. Accordingto such a configuration, for example, even when communication qualitybetween the server device 10 and the terminal device 20 temporarilydeteriorates, the probability that processing is immediately suspendedis decreased. Further, in the terminal device 20, even when fraudulentprocessing such as rewriting of parameter or the like are performed, theprobability that such fraudulent processing can be eliminated isimproved.

(Outline of Game)

An outline of the game according to the embodiment is described. Thegame according to the embodiment includes one or more game part(s). Atleast one of one or more game part(s) may be executed using a gamecontent as described later. During execution of the game part, the gamecontent may be operated, for example, by a user or AI (ArtificialIntelligence). AI may be realized by a processor(s) provided in theserver device 10 or the terminal device 20, for example.

The game content is electronic data to be used in the game and includesany medium such as a card, an item, a virtual currency, a ticket, acharacter, an avatar, level information, status information, parameterinformation (health point value, offensive power, etc.), capabilityinformation (skill, ability, spell, job, etc.) and the like. The gamecontent is also electronic data that can be acquired, owned, used,managed, exchanged, synthesized, strengthened, sold, discarded, donatedor the like by a user in the game, but usage modes of the game contentare not limited to what are specified in the present description.

Hereinafter, unless otherwise specified, “a game content owned by auser” means the game content associated with a user ID capable ofuniquely identifying such user. Also, “to give a game content to a user”means that the game content is associated with a user ID. Also, “todestroy a game content owned by a user” means that the associationbetween a user ID and the game content is cancelled. Also, “to consume agame content owned by a user” means that some effect or influence can beexerted in the game in response to cancellation of the associationbetween a user ID and the game content. Also, “to sell a game contentowned by a user” means that the association between a user ID and thegame content is cancelled and another game content (for example, avirtual currency or an item etc.) is associated with the user ID. Also,“to transfer a game content owned by a user A to a user B” means thatthe association between a user ID of the user A and the game content iscancelled and such game content is associated with a user ID of the userB. Also, “to create a game content” means that at least a part ofinformation on the game content is defined or determined.

A game part may include any content that a user can play in the game.For example, the game part may include any content such as a quest, amission, a mini game, acquisition/training/strengthening/synthesis of agame content, searching of a virtual space, a battle against an opponent(for example, another user, an enemy character, an enemy's building,etc.). In each game part, one or more predetermined game task(s) may beset. When it is determined that one or more game task(s) set for thegame part to be played by a user has/have been successfully achieved,for example, a game content or the like may be given to the user as areward. Any task according to the content of the game part can beadopted as the game task(s), for example, including a task of winning abattle against an enemy character, a task of reaching a goal point in avirtual space, and a task that a user's character does not come into apredetermined state (for example, a state that degree of soundness asdescribed later is zero) until a predetermined time passes. Further,that a specific game task (a task of completing) among one or more gametask(s) set in the game part is achieved is also referred to ascompleting of the game part. When the user who plays the game partsucceeds in achieving the task of completing, it is determined that suchgame part is completed, and thereby such game part may end.

A single-play part and a multi-play part may be included in one or moregame parts. The single-play part may include, for example, a game part(for example, a one-person game part) to be executed based on user'soperation with respect to one terminal device 20 used by one user. Forexample, the single-play part is executed using one terminal device 20independently or using one terminal device 20 and the server device 10in cooperation. On the other hand, the multi-play part may include, forexample, a game part (for example, a plural-persons game part) common totwo or more users to be executed based on users' operation with respectto two or more terminal devices respectively used by such two or moreusers. The game part common to two or more users may include, forexample, a game part in which at least a part of processing of progressof such game part and at least a part of processing results are appliedto such two or more users in common. For example, the multi-play part isexecuted using two or more terminal devices 20 in cooperation or usingtwo or more terminal devices 20 and the server device 10 in cooperation.The multi-play part may include a game part in which a plurality ofusers play battles against or cooperate with each other in the game. Onegame part may correspond to both of the single-play part and themulti-play part.

An outline of the embodiment is described. The server device 10 and theterminal device 20 store game data of a user, respectively. Hereinafter,game data stored in the server device 10 are also referred to asserver-side game data, and game data stored in the terminal device 20are also referred to as terminal-side game data. The game data of theuser are data used for execution of the game and include any datainherent in such user. The game data may include saved data of the game.The game data can be updated in response to execution of any processingrelated to the game.

The server-side game data and the terminal-side game data are managed soas to be matched with each other. However, when the terminal-side gamedata are falsified, for example, due to fraudulent action of a user, theserver-side game data and the falsified terminal-side game data are notalways matched with each other. Here, when the game is RPG (Role-PlayingGame), an example of managing the server-side game data and theterminal-side game data is described. The user operates, for example, auser character placed in the virtual space to play a battle game part ofplaying a battle against an opponent such as an enemy character or thelike and a search game part of searching a dungeon in a cave, a buildingor the like. For example, by executing processing of game of progressingthe battle game part or the search game part, the user can acquire agame content such as a character, a weapon, an item or the like.

When the game content is acquired by the user, the terminal-side gamedata are updated. For example, when the user acquires an item, theterminal-side game data are updated so that the owned number of suchitem is increased. When the terminal-side game data are updated, aninstruction to update the server-side game data (an updatinginstruction) is transmitted from the terminal device 20 to the serverdevice 10. The server device 10 updates the server-side game data basedon the updating instruction received from the terminal device 20. Inthis manner, the server-side game data are updated so as to be matchedwith the terminal-side game data after updated. The content of the gameis not limited to the above example of RPG, but may be arbitrarilydetermined, for example, in such a game as a racing game, a simulationgame, a puzzle game or the like.

In the embodiment, the server-side game data are updated using token(s).Specifically, the server device 10 in advance generates and stores oneor more token(s). Each token is any information distinguishable fromeach other. For example, the token is character string data in apredetermined number of bits, but it is not limited to this. Theterminal device 20 in advance retrieves such one or more token(s) fromthe server device 10 to store it/them. When transmitting the updatinginstruction of the server-side game data as described above, theterminal device 20 transmits the token(s) together with the updatinginstruction to the server device 10. Upon transmitting, for example, theupdating instruction and the token(s), the terminal device 20 deletessuch token(s) stored therein. When the token(s) received from theterminal device 20 and the token(s) stored in advance in the serverdevice 10 are matched, the server device 10 updates the server-side gamedata and deletes such token(s) stored therein.

On the other hand, when the token(s) received from the terminal device20 and the token(s) stored in advance in the server device 10 are notmatched, the server device 10 does not update the server-side game data.Hereinafter, the token(s) transmitted by the terminal device 20, whichdoes/do not match the token(s) stored in advance in the server device10, is/are also referred to as an improper token(s). And, the token(s)transmitted by the terminal device 20, which does/do match the token(s)stored in advance in the server device 10, is/are also referred to as aproper token(s).

Further, when receiving only the updating instruction without thetoken(s) from the terminal device 20, the server device 10 does notupdate the server-side game data. Hereinafter, the updating instructiontransmitted by the terminal device 20 without the token(s) or togetherwith the improper token(s) is also referred to as an improper updatinginstruction. The updating instruction transmitted by the terminal device20 together with the proper token(s) is also referred to as a properupdating instruction.

According to such a configuration, the server-side game data are notupdated unless the proper token(s) and the proper updating instructionare transmitted from the terminal device 20 to the server device 10.Therefore, for example, when the user falsifies the terminal-side gamedata due to fraudulent action, the probability that the server-side gamedata are updated so as to be matched with the terminal-side game dataafter falsified is reduced. Therefore, the probability that the gamedata are falsified due to fraudulent action of the user who uses theterminal device 20 is reduced. Hereinafter, more details on theembodiment are described.

(Configuration of Server Device)

A configuration of the server device 10 is specifically described. Theserver device 10 includes a server communication unit 11, a serverstorage unit 12, and a server control unit 13.

The server communication unit 11 includes one or more interface(s) thatdoes/do communicate with an external device without wires or with wiresto transmit and receive information. The server communication unit 11may include, for example, a wireless LAN (Local Area Network)communication module, a wired LAN communication module or the like. Theserver communication unit 11 can transmit and receive information withthe terminal device 20 via the network 30.

The server storage unit 12 includes one or more memory(ies). Thememory(ies) may include, for example, a semiconductor memory, a magneticmemory, an optical memory or the like. Each memory included in theserver storage unit 12 may function, for example, as a main storagedevice, an auxiliary storage device, or a cache memory. The serverstorage unit 12 stores information and programs to be used forprocessing of game.

With reference to FIG. 2, an example of information stored in the serverstorage unit 12 is described. The server storage unit 12 stores a userID, one or more token(s), a public key, the server-side game data, andevaluation information with each user who uses the informationprocessing system 1. One or more token(s), the public key, theserver-side game data, and the evaluation information may be stored inassociation with the user ID.

The user ID is information capable of uniquely identifying a user.Hereinafter, the user ID is simply referred to as the user. The user IDmay be determined to be stored in the server storage unit 12, forexample, when the user starts using the information processing system 1(for example, when establishing an account).

Each of one or more token(s) is any information distinguishable fromeach other as described above. As described later, the token(s) is/aregenerated by the server control unit 13 to be stored in the serverstorage unit 12. As described later, the token(s) stored in the serverstorage unit 12 is/are used for collation with the token(s) to bereceived from the terminal device 20.

The public key corresponds to a secret key stored in the terminal device20 of the user as described later. The public key is in advanceretrieved from, for example, the terminal device 20. As described later,the public key is used for decryption of information encrypted using thesecret key.

The server-side game data are data used for execution of the game andinclude any data inherent in the user. For example, the server-side gamedata may include a game content owned by the user in the game, but it isnot limited to this. As described above, the server-side game data canbe updated so as to be matched with the terminal-side game data storedin the terminal device 20.

The evaluation information is information indicating evaluation of theuser. As described later, the evaluation information can be modified,for example, to make evaluation of the user lower every time theimproper token(s) or the improper updating instruction is/aretransmitted from the terminal device 20 to the server device 10. Asdescribed later, the evaluation information may be used fordetermination on whether or not the account of the user is suspended,for example. By suspending the account, a game play by the user can beprohibited. Also, the evaluation information may be used fordetermination on whether or not the terminal-side game data are updatedso as to be matched with the server-side game data. For example, theterminal-side game data equivalent to game data after falsified can beupdated so as to be matched with the server-side game data equivalent togame data before falsified.

The server control unit 13 shown in FIG. 1 includes one or moreprocessor(s). The processor(s) may include a general processor and anexclusive processor dedicated to specific processing. The server controlunit 13 controls overall behaviors of the server device 10. For example,the server control unit 13 can transmit and receive information via theserver communication unit 11. The server control unit 13 can storeinformation in the server storage unit 12. More details on behaviors ofthe server control unit 13 are described later.

(Configuration of Terminal Device)

A configuration of the terminal device 20 is specifically described. Asshown in FIG. 1, the terminal device 20 includes a terminalcommunication unit 21, a terminal storage unit 22, a display unit 23, aninput unit 24, and a terminal control unit 25.

The terminal communication unit 21 includes an interface thatcommunicates with an external device without wires or with wires totransmit and receive information. The terminal communication unit 21 mayinclude a wireless communication module compliant with a mobilecommunication standard such as LTE (Long Term Evolution) (registeredtrademark), a wireless LAN communication module, a wired LANcommunication module or the like. The terminal communication unit 21 cantransmit and receive information with the server device 10 via thenetwork 30.

The terminal storage unit 22 includes one or more memory(ies). Eachmemory included in the terminal storage unit 22 may function, forexample, as a main storage device, an auxiliary storage device, or acache memory. The terminal storage unit 22 may be incorporated in theterminal device 20 or may be connected to the terminal device 20 via anyinterface. The terminal storage unit 22 stores information and programsto be used for processing of game.

With reference to FIG. 3, an example of information stored in theterminal storage unit 22 is described. The terminal storage unit 22stores a game application, a user ID, one or more token(s), a secretkey, and the terminal-side game data.

The game application is an application to execute the game according tothe embodiment. For example, in a state that the game application isactivated, a user can play the game.

The user ID is information capable of uniquely identifying the user andcorresponds to the user ID stored in the server storage unit 12 asdescribed above.

Each of one or more tokens is any information distinguishable from eachother. As described later, when the token(s) is/are transmitted from theserver device 10 to the terminal device 20, the token(s) is/are storedin the terminal storage unit 22. Therefore, one or more token(s) storedin the terminal storage unit 22 is/are identical to one or more tokensstored in the server device 10.

The secret key corresponds to the public key stored in the serverstorage unit 12 as described above. As described later, the secret keyis used for encryption of information to be transmitted from theterminal device 20 to the server device 10.

The terminal-side game data are data used for execution of the game andinclude any data inherent in the user. As described above, theserver-side game data stored in the server device 10 can be updated soas to be matched with the terminal-side game data.

The display unit 23 shown in FIG. 1 includes a display device such as aliquid crystal display, an organic EL display or the like. The displayunit 23 can display various screens.

The input unit 24 includes any input interface that accepts user'soperation. The input interface may include, for example, a pointingdevice such as a mouse, a physical key, a touch panel integrallyprovided in the display unit 23 and the like.

The terminal control unit 25 includes one or more processor(s). Theterminal control unit 25 controls overall behaviors of the terminaldevice 20. For example, the terminal control unit 25 can transmit andreceive information via the terminal communication unit 21. The terminalcontrol unit 25 can store information in the terminal storage unit 22.The terminal control unit 25 can display information on the display unit23. The terminal control unit 25 can detect user's operation onto theinput unit 24. More details on behaviors of the terminal control unit 25are described later.

(Exemplified Behaviors of Server Device and Terminal Device)

Exemplified behaviors of the server control unit 13 of the server device10 and the terminal control unit 25 of the terminal device 20 arespecifically described.

The server control unit 13 stores, as described above, the user ID, thepublic key, the server-side game data, and the evaluation information inthe server storage unit 12. The server control unit 13 generates one ormore token(s). The server control unit 13 stores such one or moretoken(s) in the server storage unit 12. The server control unit 13transmits the generated such one or more token(s) to the terminal device20. The terminal control unit 25 receives such one or more token(s) fromthe server device 10 to store it/them in the terminal storage unit 22.Accordingly, such one or more token(s) is/are stored in the serverstorage unit 12 and the terminal storage unit 22, respectively.

The terminal control unit 25 activates the game application, forexample, in response to user's operation. The terminal control unit 25executes processing of game, for example, in response to user'soperation or automatically. The game part (for example, the battle gamepart of playing a battle against an opponent, the search game part ofsearching a dungeon, or the like) may progress through execution ofprocessing of game. The terminal control unit 25 can update theterminal-side game data stored in the terminal storage unit 22 inresponse to results of execution of processing of game. For example,when the user wins the opponent resulting from execution of processingof game of the battle game part to acquire a game content, or when theuser acquires a game content from a treasure box resulting fromexecution of processing of game of the search game part, theterminal-side game data are updated so that the owned number of suchgame content by the user is increased.

Upon updating the terminal-side game data, the terminal control unit 25generates update information and information-to-be-encrypted includingthe token(s). More details of the update information and theinformation-to-be-encrypted are described later. The terminal controlunit 25 adds information-to-be-transmitted to a transmission queue,wherein the information-to-be-transmitted includes: the updatinginstruction to update the server-side game data including the updateinformation; and encrypted information obtained by encrypting theinformation-to-be-encrypted using the secret key. Any information may beadded to the transmission queue because of being not limited to theinformation-to-be-transmitted. The terminal control unit 25 transmitsthe information-to-be-transmitted to the server device 10 via thetransmission queue. The transmission of information via the transmissionqueue may be executed at any timing. For example, the transmission ofinformation via the transmission queue may be executed in response tooccurrence of a predetermined event in the game. Such event may include,for example, a transition event to a predetermined game screen, atransition event to a predetermined internal state in the game, an eventwhere a predetermined game part starts or ends, or the like. Theinternal state of the game is, for example, a state that is in advancedefined in response to a game part to be executed, processing of game orthe like. Based on the internal state of the game, the game part or theprocessing of game or the like which has been executed can beidentified. The terminal control unit 25 deletes the token(s) includedin the transmitted information-to-be-transmitted from the terminalstorage unit 22.

Here, the updating instruction and the information-to-be-encrypted aredescribed in detail. The updating instruction of the server-side gamedata includes a first instruction and a second instruction. The firstinstruction is an instruction to update the server-side game data whenthe token(s) to be extracted by decrypting the encrypted information andthe token(s) stored in the server storage unit 12 are matched. Thesecond instruction is an instruction to modify the evaluationinformation stored in the server storage unit 12 when the token(s) to beextracted by decrypting the encrypted information and the token(s)stored in the server storage unit 12 are not matched.

Further, the updating instruction of the server-side game data includes,as shown in FIG. 4 for example, the update information having a user ID,difference data, and a signature ID. The difference data are informationindicating the difference between before and after updating theterminal-side game data when the terminal-side game data are updatedresulting from execution of processing of game as described above. Forexample, when the owned number of game content by the user has beenincreased from 1 piece to 6 pieces through updating the terminal-sidegame data, the difference data may include an ID of such game contentand a difference value (+5 pieces) of the owned number of such gamecontent by the user. The signature ID is identical to the signature IDincluded in the information-to-be-encrypted as described later. Theupdating instruction and the update information are associated with theinformation-to-be-encrypted via the signature ID. The updatinginstruction of the server-side game data is not limited to the aboveexample and may include any information to be used for update of theserver-side game data.

As shown in FIG. 5 for example, the information-to-be-encrypted includesthe signature ID, the token(s), and information for reproduction. Thesignature ID is information capable of uniquely identifying theinformation-to-be-encrypted. The token(s) is/are selected among one ormore token(s) stored in the terminal storage unit 22. The informationfor reproduction includes any information used for reproduction of suchprocessing of game when the terminal-side game data are updatedresulting from execution of processing of game by the terminal controlunit 25 as described above. Here, “reproduction” includes that anotherdevice other than the terminal device 20 obtains the same result byexecuting the same processing as processing of game executed by theterminal control unit 25, for example. Such another device may be, forexample, the server device 10, or may be an information processingdevice such as a computer or a smartphone to be used by a game provideror a game developer.

A specific example of the information for reproduction is described. Forexample, when processing of game includes processing of progressing somegame parts among a plurality of game parts included in the game, theinformation for reproduction may include information indicating the gamepart that has been progressed by processing of game. The informationindicating the game part may be, for example, information capable ofuniquely identifying the game part, or may be information indicating akind (for example, the battle game part or the search game part, etc.)of the game part. According to the information indicating the game part,the game part in which such processing of game has been executed can beidentified.

Further, the information for reproduction may include informationindicating a game parameter(s) used during execution of the processingof game by the terminal control unit 25. More specifically, when theprocessing of game includes processing of progressing the battle gamepart, for example, parameter(s) or the like of each character (forexample, identification information, health point, and offensive powerof character, etc.) against whom battles are played may be used as thegame parameter(s) for execution of such processing of game.Alternatively, when the processing of game includes processing ofprogressing the search game part, for example, parameter(s) or the likeof a dungeon (for example, identification information of dungeon,identification information of a treasure box being present and opened bythe user, etc.) which is a target for search may be used as the gameparameter(s) for execution of such processing of game.

Information included in the information for reproduction is not limitedto the above example and may be arbitrarily determined in response tocontent of the processing of game. For example, when the processing ofgame includes processing of lottery using random seed to be retrievedfrom the server device 10, the information for reproduction may includeat least one of a random seed value used in such processing of lottery,a result value of lottery, a minimum value of lottery, a maximum valueof lottery, and the number of trials of lottery.

The content of the information for reproduction is not limited to theabove example. For example, the information for reproduction may includeany information used for reproduction of the processing of game, such aslog information when the processing of game is executed by the terminalcontrol unit 25. The log information may include any information usedfor the processing of game, such as game operation information by theuser or AI, information indicating the internal state of the game andthe like.

By executing reproduction of the processing of game using theabove-described information for reproduction, the result of suchprocessing of game executed by the terminal control unit 25 and theresult of such processing of game reproduced using the information forreproduction are matched. On the other hand, for example, when theresult of the processing of game executed by the terminal control unit25 has been falsified due to fraudulent action of the user (for example,the result of “the user acquires items in 5 pieces” has been falsifiedto the result of “the user acquires items in 100 pieces), the result ofsuch processing of game executed with falsification and the result ofsuch processing of game reproduced using the information forreproduction come into being not matched. Therefore, by using theinformation for reproduction, for example, the probability that a gameprovider or a game developer can find fraudulent action by the user isimproved. Reproduction of the processing of game using the informationfor reproduction may be executed by the server device 10 or may beexecuted by an exclusive information processing device (for example, abatch server that reproduces each of a plurality of processing of gameby batch processing).

Upon receiving the above-described information-to-be-transmitted fromthe terminal device 20, the server control unit 13 decrypts theencrypted information included in such information-to-be-transmittedusing the public key. The server control unit 13 extracts the updatinginstruction and the token(s) included in the encrypted information afterdecrypted (that is, the above-described information-to-be-encrypted).The server control unit 13 determines whether or not such extractedtoken(s) and the token(s) stored in the server storage unit 12 arematched.

When it is determined that the both are matched, the server control unit13 updates the server-side game data based on the first instructionincluded in the updating instruction. For example, when the differencedata included in the updating instruction includes the ID of the gamecontent acquired by the user and the difference value (+5 pieces) of theowned number of such game content of the user, the server control unit13 updates the server-side game data so as to increase the owned numberof such game content of the user by 5 pieces. The server control unit 13may delete such token(s) stored in the server storage unit 12 or maystock such token(s) in the log information as a used token(s), forexample.

On the other hand, when it is determined that the both are not matched,the server control unit 13 does not update the server-side game data butmodify the evaluation information stored in the server storage unit 12based on the second instruction included in the updating instruction.For example, the server control unit 13 may modify the evaluationinformation so as to make the evaluation of the user lower.

Further, when receiving only the updating instruction without receivingthe token(s) from the terminal device 20, the server control unit 13does not update the server-side game data but modify the evaluationinformation stored in the server storage unit 12. For example, theserver control unit 13 may modify the evaluation information so as tomake the evaluation of the user lower.

As described above, when the token(s) received from the terminal device20 and the token(s) in advance stored in the server storage unit 12 arematched, the server control unit 13 updates the server-side game data.On the other hand, when the both are not matched, or when receiving onlythe updating instruction without receiving the token(s) from theterminal device 20, the server control unit 13 does not update theserver-side game data. According to such a configuration, for example,when the user has falsified the terminal-side game data due tofraudulent action, the probability that the server-side game data areupdated so as to be matched with the terminal-side game data afterfalsified is reduced. Therefore, the probability that the game data arefalsified due to fraudulent action of the user who uses the terminaldevice 20 is reduced.

Further, as described above, every time the terminal control unit 25transmits the information-to-be-transmitted to the server device 10, theterminal control unit 25 deletes the token(s) included in suchinformation-to-be-transmitted from the terminal storage unit 22. Here,the terminal control unit 25 may determine whether or not the number oftoken(s) stored in the terminal storage unit 22 has decreased to apredetermined value. When it is determined that the number of token(s)has decreased to the predetermined value, the terminal control unit 25transmits a retrieving request of a new token(s) to the server device10. In response to such retrieving request, the server control unit 13generates a new token(s), stores it/them in the server storage unit 12,and transmits it/them to the terminal device 20. The terminal controlunit 25 receives such new token(s) from the server device 10 to storeit/them in the terminal storage unit 22.

The terminal control unit 25 may execute processing of receiving the newtoken(s) from the server device 10 to store it/them in the terminalstorage unit 22 in the background while the game is in progress. Whensuch processing is executed in the background, the new token(s) is/arereceived from the server device 10 to be stored without suspendingprogress of the game.

Alternatively, the terminal control unit 25 may execute the processingof receiving the new token(s) from the server device 10 to store it/themin the terminal storage unit 22 in the foreground. When such processingis executed in the foreground, progress of the game is suspended untilthe new token(s) is/are received from the server device 10 to be stored.For example, the terminal control unit 25 may suspend progress of thegame until the new token(s) is/are received from the server device 10 tobe stored in the terminal storage unit 22. While progress of the game issuspended, the terminal control unit 25 may display, for example,exclusive information (for example, a message indicating that theterminal device 20 and the server device 10 are under communication) ora predetermined game screen (for example, a title screen displayed atthe beginning of the game) on the display unit 23. According to such aconfiguration, for example, the probability that inconvenience makingthe proper updating instruction impossible to be transmitted due to lackof token(s) stored in the terminal storage unit 22 is caused is reduced.

Furthermore, as described above, the server control unit 13 transmitsinformation such as the information-to-be-transmitted to the serverdevice 10 via the transmission queue. Here, the terminal control unit 25may determine whether or not the number of un-transmitted informationincluded in the transmission queue has increased to reach a firstpredetermined value.

When it is determined that the number of un-transmitted information hasnot reached the first predetermined value, the terminal control unit 25executes processing of transmitting information to the server device 10via the transmission queue in the background while the game is inprogress. When such processing is executed in the background, theun-transmitted information included in the transmission queue istransmitted to the server device 10 without suspending progress of thegame. The terminal control unit 25 may display any informationsuggesting to the user that the terminal device 20 and the server device10 are under communication in the background on a game screen forprogressing the game.

A game screen 40 as shown in FIG. 6, for example, is an example of ascreen for progressing the game according to the embodiment. A usercharacter 41 and a first information 42 are displayed on the game screen40. The user character 41 is movable within the virtual space, forexample, in response to user's operation or automatically. The firstinformation 42 includes any information suggesting to the user that theterminal device 20 and the server device 10 are under communication inthe background. In the example shown in FIG. 6, a message of “AutoSaving” is displayed as the first information 42. The user who hasviewed the first information 42 can recognize that the terminal device20 and the server device 10 are under communication in the background.

On the other hand, when it is determined that the number ofun-transmitted information has reached the first predetermined value,the terminal control unit 25 executes processing of transmittinginformation to the server device 10 via the transmission queue in theforeground. When such processing is executed in the foreground, progressof the game is suspended until the un-transmitted information includedin the transmission queue is transmitted to the server device 10. Forexample, the terminal control unit 25 may suspend progress of the gameuntil at least one of information is transmitted to the server device 10via the transmission queue. Further, for example, the terminal controlunit 25 may suspend progress of the game until the number ofun-transmitted information included in the transmission queue reaches asecond predetermined value smaller than the first predetermined value.While progress of the game is suspended, the terminal control unit 25may display a predetermined game screen (for example, a title screendisplayed at the beginning of the game). Alternatively, while progressof the game is suspended, the terminal control unit 25 may display anyinformation suggesting to the user that the terminal device 20 and theserver device 10 are under communication in the foreground on a gamescreen for progressing the game.

On the game screen 40 as shown in FIG. 7, for example, a secondinformation 43 is displayed. The second information 43 includes anyinformation suggesting to the user that the terminal device 20 and theserver device 10 are under communication in the foreground. In theexample shown in FIG. 7, a dialog box including a message of “AutoSaving” is displayed as the second information 43. The user who hasviewed the second information 43 can recognize that the terminal device20 and the server device 10 are under communication in the foreground.

With reference to FIG. 8, a flow of a first behavior of the informationprocessing system 1 is described. The first behavior includes a behaviorof the information processing system 1 in which one or more token(s)generated by the server device 10 is/are stored in the server device 10and the terminal device 20, respectively.

In Step S100, the server device 10 generates one or more token(s).

In Step S101, the server device 10 stores such one or more token(s) inthe server storage unit 12.

In Step S102, the server device 10 transmits such one or more token(s)after generated to the terminal device 20.

In Step S103, the terminal device 20 receives such one or more token(s)from the server device 10 to store it/them in the terminal storage unit22.

With reference to FIG. 9, a flow of a second behavior of the terminaldevice 20 is described. The second behavior includes a behavior of theterminal device 20 in which the information-to-be-transmitted is addedto the transmission queue.

In Step S200, the terminal device 20 executes processing of game, forexample, in response to user's operation or automatically.

In Step S201, the terminal device 20 updates the terminal-side game datastored in the terminal storage unit 22 in response to the result ofexecution of the processing of game.

In Step S202, the terminal device 20 adds to the transmission queue theinformation-to-be-transmitted including the updating instruction ofupdating the server-side game data and the encrypted informationobtained by encrypting the information-to-be-encrypted including thetoken(s).

With reference to FIG. 10, a flow of a third behavior of the informationprocessing system 1 is described. The third behavior includes a behaviorof the information processing system 1 in which theinformation-to-be-transmitted is transmitted from the terminal device 20to the server device 10.

In Step S300, the terminal device 20 transmits theinformation-to-be-transmitted to the server device 10 via thetransmission queue.

In Step S301, the terminal device 20 deletes the token(s) included inthe information-to-be-transmitted after transmitted from the terminalstorage unit 22.

In Step S302, the server device 10 extracts the updating instruction andthe token(s) from the information-to-be-transmitted received from theterminal device 20.

In Step S303, the server device 10 determines whether or not thetoken(s) extracted in Step S302 and the token(s) stored in the serverstorage unit 12 in Step S101 are matched with each other. When it isdetermined that the both are matched (Step S303-Yes), a process proceedsto Step S304. On the other hand, when it is determined that the both arenot matched (Step S303-No), a process proceeds to Step S306.

In Step S304, when it is determined that the both are matched in StepS303 (Step S303-Yes), the server device 10 updates the server-side gamedata based on the first instruction included in the updatinginstruction.

In Step S305, the server device 10 deletes the token(s), which is/arematched with the token(s) extracted in Step S302 and stored in theserver storage section 12, or it stocks such token(s) in the loginformation as a used token(s).

In Step S306, when it is determined that the both are not matched inStep S303 (Step S303-No), the server device 10, based on the secondinstruction included in the updating instruction, does not update theserver-side game data but modify the evaluation information stored inthe storage unit 12.

With reference to FIG. 11, a flow of a fourth behavior of the terminaldevice 20 is described. The fourth behavior includes a behavior of theterminal device 20 in which progress of the game is suspended.

In Step S400, the terminal device 20 determines whether or not thenumber of token(s) stored in the terminal storage unit 22 has decreasedto the predetermined value. When it is determined that the number oftoken(s) has decreased to the predetermined value (Step S400-Yes), aprocess proceeds to Step S401. On the other hand, when it is notdetermined that the number of token(s) has decreased to thepredetermined value (Step S400-No), a process proceeds to Step S403.

In Step S401, when it is determined in Step S400 that the number oftoken(s) has decreased to the predetermined value (Step S400-Yes), theterminal control unit 25 transmits a retrieving request of a newtoken(s) to the server device 10.

In Step S402, the terminal control unit 25 suspends progress of the gameuntil receiving the new token(s) from the server device 10 to storeit/them in the terminal storage unit 22. When progress of the gameresumes, a process turns back to Step S400.

In Step S403, when it is not determined in Step S400 that the number oftoken(s) has decreased to the predetermined value (Step S400-No), theterminal control unit 25 determines whether or not the number ofun-transmitted information included in the transmission queue hasincreased to reach the first predetermined value. When it is determinedthat the number of un-transmitted information has reached the firstpredetermined value (Step S403-Yes), a process proceeds to Step S404. Onthe other hand, when it is not determined that the number ofun-transmitted information has reached the first predetermined value(Step S403-No), a process turns back to Step S400.

In Step S404, when it is determined that the number of un-transmittedinformation has reached the first predetermined value in Step S403 (StepS403-Yes), the terminal control unit 25 suspends progress of the gameuntil at least one of information is transmitted to the server device 10via the transmission queue. When progress of the game resumes, a processturns back to Step S400.

As described above, the terminal device 20 receives from the serverdevice 10 the token(s) generated and stored in the server device 10 tostore it/them in the terminal storage unit 22. The terminal device 20transmits the information-to-be-transmitted including the token(s) tothe server device 10. The terminal device 20 deletes such token(s)stored in the terminal storage unit 22. Here, theinformation-to-be-transmitted includes the updating instruction toupdate the server-side game data stored in the server device 10 when thetoken(s) included in such information-to-be-transmitted and the token(s)stored in the server device 10 are matched. According to such aconfiguration, when the token(s) received from the terminal device 20and the token(s) stored in the server device 10 are not matched, theserver-side game data are not updated. Therefore, for example, when theuser falsifies the terminal-side game data due to fraudulent action, theprobability that the server-side game data are updated so as to bematched with the terminal-side game data after falsified is reduced.Therefore, the probability that the game data are falsified due tofraudulent action of the user who uses the terminal device 20 isreduced. For example, when a rate of processing of the terminal device20 is increased as processing capability of the terminal device 20 isimproved, the risk of fraudulent action by the user who uses theterminal device 20 may be increased. This embodiment is particularlysuitable in such a case.

Although the present invention has been described with reference tofigures and embodiments, it should be noted that those skilled in theart can easily make various modifications and improvements based on thepresent disclosure. It is therefore to be noted that these modificationsand improvements are included within the scope of the present invention.For example, it is possible to relocate various functions and the likeincluded in each means and in each step, etc. so as not to be logicallyinconsistent, and it is possible to combine plural means and steps intoone or divide plural means and steps.

For example, in the above-described embodiments, a configuration inwhich the terminal device 20 executes a part or all of behaviors andprocessing executed by the server device 10 may be allowable. Likewise,a configuration in which the server device 10 may execute a part ofbehaviors executed by the terminal device 20 may be allowable. Forexample, processing such as a display control of various screens to bedisplayed on the terminal device 20 and a control of various GUIs may beexecuted by one of the server device 10 and the terminal device 20,alternatively it may be executed by the server device 10 and theterminal device 20 in cooperation.

Further, in the above-described embodiment, the exemplified behaviors ofthe server device 10 and the terminal device 20 have been described withreference to FIGS. 8 to 11. However, some steps included in suchbehaviors, or some behavoirs included in one step may be omitted. Theorder of a plurality of steps may be changed within a logicallyconsistent range.

Furthermore, in the above-described embodiment, theinformation-to-be-transmitted to be transmitted from the terminal device20 to the server device 10 includes the encrypted information obtainedby encrypting the information-to-be-encrypted using the secret keystored in the terminal device 20. Here, the information-to-be-encryptedmay be encrypted using, for example, a public key transmitted in advancefrom the server device 10 to the terminal device 20. In such a case, theserver device 10 decrypts the encrypted information included in theinformation-to-be-transmitted received from the terminal device 20 usinga secret key stored in advance in the server storage unit 12.Alternatively, a configuration in which theinformation-to-be-transmitted includes the information-to-be-encryptedhaving been not encrypted may be allowable. In such a case, there is noneed to encrypt the information-to-be-encrypted in the terminal device20, and there is no need to decrypt it in the server device 10.

Furthermore, in the above-described embodiment, a configuration in whichinformation indicating priority is further included in theinformation-to-be-transmitted from the terminal device 20 to the serverdevice 10 may be allowable. For example, when difference data indicatingthe difference between before and after updating the terminal-side gamedata are generated as described above, the terminal control unit 25 maydetermine the priority based on such difference data. A higher prioritymay be set to the difference data having larger impact on progress ofthe game. More specifically, when an ID of a game content included inthe difference data is, for example, an ID of a specific game contenthaving a higher rare value in the game, the terminal control unit 25 maydetermine a higher priority to such ID than usual. Alternatively, when adifference value of the owned number of game content of the userindicated in the difference data are not less than a predeterminedreference value, the terminal control unit 25 may determine a higherpriority to such difference value than usual. A correspondence relationbetween the ID of the game content or the reference value and thepriority may be established in advance. Multiple levels of the prioritymay be established. Information indicating the priority may be includedin the information-to-be-transmitted without encrypted, alternatively itmay be included in the information-to-be-transmitted with encrypted.

Upon receiving the information-to-be-transmitted from the terminaldevice 20, the server control unit 13 may determine, based on thepriority indicated in such information-to-be-transmitted and aprocessing load of the server control unit 13, whether or not thetoken(s) to be extracted from such information-to-be-transmitted and thetoken(s) stored in the server storage unit 12 are matched. For example,when the processing load of the server control unit 13 is not less thana predetermined criterion, the above processing of determiningmatchingness in terms of the token(s) may be executed only for theinformation-to-be-transmitted with a higher priority. According to sucha configuration, for example, even when the processing load of theserver device 10 is relatively higher, the probability that fraudulentaction of the user is detected is increased.

Furthermore, when the both are not matched, or when the updatinginstruction is only received without receiving the token(s) from theterminal device 20, the server control unit 13 may modify the evaluationinformation of the user based on the priority. For example, the servercontrol unit 13 may modify the evaluation information so that theevaluation of such user is largely made lower as the priority is higher.According to such a configuration, the evaluation of such user islargely made lower as the impact of fraudulent action of the user onprogress of the game is larger. Therefore, for example, the probabilitythat a user performing malicious fraudulent action can be specified isincreased.

Furthermore, in the above-described embodiment, at least a part of thescreen to be displayed on the terminal device 20 may be configured in aweb display to be displayed on the terminal device 20 based on datacreated by the server device 10, and at least a part of the screen maybe configured in a native display to be displayed by a nativeapplication installed in the terminal device 20. In this manner, thegame according to the above-described embodiment may be configured in ahybrid game in which the server device 10 and the terminal device 20take a part of processing, respectively.

Furthermore, an information processing device such as a computer or acellular phone may be preferably used in order to make it function asthe server device 10 or the terminal device 20 according to theabove-described embodiment. Such an information processing device may beachieved by storing in a storage unit of the information processingdevice a program describing processing contents to realize each functionof the server device 10 or the terminal device 20 according to theembodiment, and then by reading and executing such program by means ofCPU of the information processing device.

REFERENCE SIGNS LIST

-   1: information processing system-   10: server device-   11: server communication unit-   12: server storage unit-   13: server control unit-   20: terminal device-   21: terminal communication unit-   22: terminal storage unit-   23: display unit-   24: input unit-   25: terminal control unit-   30: network-   40: game screen-   41: user character-   42: first information-   43: second information

1. An information processing server executing at least a part of a game,comprising: a server processor programmed to: generate and transmittoken information to a terminal device; receive, from the terminaldevice, an updating instruction for updating corresponding game data ofa game of a user of the terminal device stored in a server storage, theupdating instruction comprising priority level data that indicates apriority of the corresponding game data, and encrypted information thatincludes at least the token information previously transmitted to theterminal device; determine a processing load of the informationprocessing server; decrypt the encrypted information and extract thetoken information; and upon a determination that (i) the processing loadis higher than a predetermined criteria, (ii) the extracted tokeninformation matches the token information transmitted to the terminaldevice, and (iii) the priority level data is higher than a predeterminedthreshold, update the corresponding game data stored in the serverstorage based on the updating instruction.
 2. The information processingserver according to claim 1, wherein the updating instruction receivedby the server processor indicates a difference between game data of thegame before being updated and after being updated as a result ofexecuting the game on the terminal device.
 3. The information processingserver according to claim 1, wherein the updating instruction includes asecond instruction to modify evaluation information stored in the serverto indicate an evaluation of the user if the token information,extracted from the encrypted information after decrypting the encryptedinformation transmitted from the terminal device, does not match any ofthe token information previously stored in the server.
 4. Theinformation processing server according to claim 1, wherein, the serverprocessor generates and transmits a plurality of pieces of tokeninformation different from each other and transmits the plurality ofpieces of token information to the terminal device, and the serverprocessor is programmed to suspend progress of the game until a numberof pieces of token information stored in the terminal device decreasesto a predetermined value.
 5. The information processing server accordingto claim 1, wherein the server processor is programmed to suspendprogress of the game, when a number of un-transmitted informationincluded in a transmission queue of the terminal device reaches apredetermined value, until at least one piece of the un-transmittedinformation is transmitted to the server via the transmission queue. 6.An information processing system executing a game, comprising: a serverdevice; and a terminal device, wherein the server device executes:generating and transmitting token information to the terminal device,wherein the terminal device executes: receiving the token informationfrom the server device and storing the token information in a terminalstorage of the terminal device; generating, when game data of the gamein the terminal device is updated as a result of executing a gameprocess of the game in the terminal device, the game process occurringwhile a user of the terminal device plays the game: an updatinginstruction for updating corresponding game data of the game of the userof the terminal device stored in the server device, the updatinginstruction comprising priority level data that indicates a priority ofthe corresponding game data, and information-to-be-encrypted thatincludes at least the token information stored in the terminal storage;transmitting to the server device information-to-be-transmittedincluding the updating instruction and encrypted information obtained byencrypting the information-to-be-encrypted; and wherein the serverdevice executes: determining a processing load of the server device;receiving the information-to-be-transmitted from the terminal device todecrypt the encrypted information included in theinformation-to-be-transmitted and extracting the token information; andupon a determination that (i) the processing load is higher than apredetermined criteria, (ii) the extracted token information matches thetoken information transmitted to the terminal device, and (iii) thepriority level data is higher than a predetermined threshold, updatingthe corresponding the game data stored in a server storage based on theupdating instruction.
 7. The information processing system according toclaim 6, wherein, the server device generates, and transmits a pluralityof pieces of token information different from each other to the terminaldevice, and the server device is programmed to suspend progress of thegame until a number of pieces of token information stored in theterminal storage of the terminal device decreases to a predeterminedvalue.
 8. The information processing system according to claim 6,wherein, wherein the server device is programmed to suspend progress ofthe game, when a number of un-transmitted information included in atransmission queue of the terminal device reaches a predetermined value,until at least one piece of the un-transmitted information istransmitted to the server via the transmission queue.
 9. The informationprocessing system according to claim 6, wherein the updating instructionincludes a second instruction to modify evaluation information stored inthe server device to indicate an evaluation of the user if the tokeninformation, extracted from the encrypted information after decryptingthe encrypted information transmitted from the terminal device, does notmatch any of the token information previously stored in the serverdevice.
 10. The information processing system according to claim 6,wherein the updating instruction includes difference data that indicatesa difference between game data of the game before being updated andafter being updated as a result of executing the game on the terminaldevice, and the terminal device sets the priority level data based onthe difference data.
 11. The information processing system according toclaim 10, wherein the difference data indicates a rarity of an in-gameitem used by the user playing the game on the terminal device.
 12. Theinformation processing system according to claim 10, wherein thedifference data indicates a difference value indicating a change in anowned number of in-game items used by the user playing the game on theterminal device.
 13. A non-transitory computer-readable storage mediumstoring a program that causes a server to execute at least a part of agame and causes the server to execute a method comprising: generatingand transmitting token information to a terminal device; receiving, fromthe terminal device, an updating instruction for updating correspondinggame data of a game of a user of the terminal device stored in a serverstorage, the updating instruction comprising priority level data thatindicates a priority of the corresponding game data, and encryptedinformation that includes at least the token information previouslytransmitted to the terminal device; determining a processing load of theserver; decrypting the encrypted information and extract the tokeninformation; and upon a determination that (i) the processing load ishigher than a predetermined criteria, (ii) the extracted tokeninformation matches the token information transmitted to the terminaldevice, and (iii) the priority level data is higher than a predeterminedthreshold, updating the corresponding game data stored in the serverstorage based on the updating instruction.
 14. The non-transitorycomputer-readable storage medium according to claim 13, wherein theupdating instruction received by the server indicates a differencebetween game data of the game before being updated and after beingupdated as a result of executing the game on the terminal device. 15.The non-transitory computer-readable storage medium according to claim13, wherein the updating instruction includes a second instruction tomodify evaluation information stored in the server to indicate anevaluation of the user if the token information, extracted from theencrypted information after decrypting the encrypted informationtransmitted from the terminal device, does not match any of the tokeninformation previously stored in the server.
 16. The non-transitorycomputer-readable storage medium according to claim 13, wherein in thegenerating and transmitting step, the server generates and transmits aplurality of pieces of token information different from each other andtransmits the plurality of pieces of token information to the terminaldevice, and the method further comprises suspending progress of the gameuntil a number of pieces of token information stored in the terminaldevice decreases to a predetermined value.
 17. The non-transitorycomputer-readable storage medium according to claim 13, wherein themethod further comprises suspending progress of the game, when a numberof un-transmitted information included in a transmission queue of theterminal device reaches a predetermined value, until at least one pieceof the un-transmitted information is transmitted to the server via thetransmission queue.
 18. An information processing server executing atleast a part of a game, comprising: a server processor programmed to:generate and transmit token information to a terminal device; receive,from the terminal device, an updating instruction for updatingcorresponding game data of a game of a user of the terminal devicestored in a server storage, the updating instruction comprising prioritylevel data that indicates a priority of the corresponding game data, andencrypted information; determine a processing load of the informationprocessing server; decrypt the encrypted information; upon adetermination that (i) the processing load is higher than apredetermined criteria, (ii) the encrypted information includes thetoken information transmitted to the terminal device, and (iii) thepriority level data is higher than a predetermined threshold, update thecorresponding game data stored in the server storage based on theupdating instruction; and upon a determination that (i) the tokeninformation transmitted to the terminal device does not match tokeninformation in the encrypted information received from the terminaldevice, or that (ii) the updating instruction does not include tokeninformation, modify evaluation information for the user of the terminaldevice, based on the priority level data.
 19. The information processingserver according to claim 18, wherein the evaluation information for theuser is modified to be lower as the priority level data becomes higher.20. The information processing server according to claim 18, wherein theupdating instruction received by the server processor indicates adifference between game data of the game before being updated and afterbeing updated as a result of executing the game on the terminal device.